diff --git a/.github/dependabot.yml b/.github/dependabot.yml index d20507782..14c912905 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -2,13 +2,17 @@ # https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates version: 2 updates: - - package-ecosystem: "gomod" - directory: "/" - schedule: - interval: "daily" - commit-message: - prefix: "go.mod:" - open-pull-requests-limit: 100 + ## Disabled between releases. We reenable it briefly after every + ## stable release, pull in all changes, and close it again so that + ## the tree remains more stable during development and the upstream + ## changes have time to soak before the next release. + # - package-ecosystem: "gomod" + # directory: "/" + # schedule: + # interval: "daily" + # commit-message: + # prefix: "go.mod:" + # open-pull-requests-limit: 100 - package-ecosystem: "github-actions" directory: "/" schedule: